
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: kPqG3wEUHFKyYvABwEF/wA82e9khUFzPdd6vGwuCUOk=
Subject key identifier: 44:6A:ED:86:86:81:06:F5:49:82:4C:21:75:E7:7F:6A:32:B7:B5:1C
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 01A0DE73E390FAE2B0D553C0C035EF2B2120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 1A82
Signing time: Sat 26 Sep 2026 16:02:11 +0000
Manifest this update: Sat 26 Sep 2026 16:02:11 +0000
Manifest next update: Sun 27 Sep 2026 16:02:11 +0000
Files and hashes: 1: 1Ht8Y73-Qua7KFMzeIwGJJI8X_I.roa (hash: ZxqBXhEUoWp+X2fpJ9yWN9oEtediIYSRJKK1ooCXLPA=)
2: 1aorfBEtrS5GmOfmJCAhL86Ev9o.roa (hash: nVeN0o0LJkNxID8TEKJoSJ7nvDwzMLsmkaxY6SDeSaE=)
3: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: 4bThCuidwgmPTnGqq63p+7U7IYWmJex3RBhHFQFX0XI=)
4: uySycfiPIwl3qkdAFm_UQY27DIw.roa (hash: ecxPUeUZMRc0M4fLg3pXfQaDZQ4xLa/JpCwaots4UTE=)
5: yc6fB0dTyEp0nOMNxIt14wYewvg.roa (hash: q9oC20lhVIuMqPVEpkCEXpIKxa5TMW49W8VfYHcjYb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:e3:90:fa:e2:b0:d5:53:c0:c0:35:ef:2b:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Sep 26 16:02:11 2026 GMT
Not After : Sep 27 16:02:11 2026 GMT
Subject: CN=446aed86868106f549824c2175e77f6a32b7b51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:90:41:a6:52:ee:78:a8:8d:6e:ba:dd:45:
c4:da:f0:03:77:fc:88:31:13:8e:cf:7b:f8:95:11:
62:bd:1e:7a:b0:67:ec:a7:c3:a4:b1:af:ee:b2:15:
c7:12:49:d8:80:53:be:ff:4c:66:02:16:dd:60:9e:
59:a9:4f:15:08:2f:77:95:e5:d5:08:64:34:39:76:
ff:34:33:8d:8b:a5:18:b9:ec:fa:ab:5e:fe:51:3a:
f5:4c:60:11:8f:93:7e:82:6f:2d:3c:c3:e7:69:71:
ec:8d:5b:5a:2e:9e:7e:cb:86:fb:4e:8e:7f:fb:0a:
2a:31:63:a0:e9:60:bd:37:e7:c2:f2:84:25:13:44:
b0:84:b7:6c:ad:fe:ee:1e:e5:f2:5a:d0:84:04:23:
4b:3a:27:b0:c7:a1:e6:2c:3b:57:7b:e0:84:91:f5:
66:df:4e:f5:83:60:57:f9:10:35:81:06:b9:34:f7:
3b:32:e3:3c:ed:7c:0a:7c:68:41:25:a0:b8:71:dc:
3e:2f:93:de:b6:af:0d:b8:f2:4a:20:3d:01:2c:f5:
23:a9:56:d9:6e:09:0c:5a:55:10:07:9a:6d:b4:55:
7b:57:11:9d:d1:d1:f5:69:05:74:90:b2:6b:4c:93:
bd:2b:5b:a2:f5:9c:05:15:63:d3:2c:14:72:d7:26:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:ED:86:86:81:06:F5:49:82:4C:21:75:E7:7F:6A:32:B7:B5:1C
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f5:ee:f8:e0:c3:87:74:e1:0e:11:82:74:e1:df:fe:9f:5a:
de:c2:b9:23:91:cb:80:03:12:4a:61:de:1d:1b:c3:b9:bd:09:
05:a2:c3:cc:5c:8c:cd:bf:be:d9:5a:e9:c2:fd:9f:ef:bd:b2:
44:fc:38:53:d9:54:c7:5b:fb:13:90:7a:91:18:5a:e3:1c:67:
5f:e1:20:6e:72:57:eb:e5:1b:65:07:0c:6c:e7:70:1f:bf:84:
fd:b3:26:24:35:6d:76:38:08:88:a6:b4:0c:f0:7c:ab:08:a7:
16:2e:d0:e3:60:b1:cb:98:34:a4:89:55:4e:38:32:06:39:4a:
f6:e7:eb:b3:f3:aa:46:9b:ec:79:ef:e1:54:09:65:0c:81:6c:
cd:10:db:7b:2c:88:15:d7:66:85:a1:b1:a1:5a:25:8e:e1:a1:
b2:a9:3f:d0:6c:37:cb:9f:5b:83:30:e4:21:67:32:ed:ba:34:
95:d9:5f:11:6b:d8:62:9f:fb:c4:aa:d5:b6:ce:ff:0d:36:8f:
dd:0b:55:a0:f0:c0:13:f2:ff:36:45:74:e0:ad:c9:a8:d0:1f:
af:1a:ca:0a:29:16:35:17:43:bb:f9:5a:01:7d:73:81:6a:7e:
2a:c8:99:34:3c:a5:52:93:99:da:fc:6c:83:ad:19:e1:c2:3b:
3e:93:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:27:20 2026 by rpki-client